https landing page sends you to insecure login

[CharlieMurphy 73]

I have SSL setup and working on my server. When i land at https://emby.media/index.html and click "SIGN IN", it takes me to the insecure http://app.emby.media/. Firefox alerts me by the password box that the connection is not secure. I then have to modify the URL to https manually, which works.

 

This seems like a sketchy default. Is this a bug? I almost sent my password twice today.

[Luke 37007]

Hi, the problem is that using 

https://app.emby.media

will only work if you have setup https for your Emby Server. If we make that the default then we will just get hammered with troubleshooting from people who have not setup https on their server.

 

Perhaps one day when we can guarantee that all Emby Server's run with https, then we can change this.

[CharlieMurphy 73]

Fair. It just seems so unusual to be on a secure page and go to an insecure page when you click "Log in".

 

Also, I'm just noticing that even though I have my server set to only allow secure connections, i can totally use the web interface from http and even play a video. I feel like this was not the case when I originally set it, I would have tested to confirm it was working. Am I misunderstanding that setting?

[Luke 37007]

 

 

Fair. It just seems so unusual to be on a secure page and go to an insecure page when you click "Log in".

I understand, and I agree it's not idea.

 

 

 

i can totally use the web interface from http and even play a video.

Inside the local network you'll still be able to use LAN addresses over http.

[CharlieMurphy 73]

Derp, I'm remote but I had a tunnel open with the Emby port forwarded. Thank you!

[Luke 37007]

Thanks for the feedback.